Вакансии

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity As a Technical Expert, you will lead the development of the company’s core security engineering and DevSecOps capabilities, with a strong focus on security product development, platform engineering, and SDK /Agent development . The ideal candidate should demonstrate deep security expertise, broad technical coverage, strong hands-on engineering capability, and exceptional influence in driving security governance across business teams . What You’ll Be Doing Lead the architecture and core development of the company’s end-to-end DevSecOps platform, security products, and SDKs/Agents , covering code, build, artifacts, images, deployment, and runtime security. Own the design and development of RASP / Java Agent runtime protection , leveraging ASM, ByteBuddy, and Java Instrumentation for bytecode enhancement, runtime hooks, detection and blocking engines, while continuously improving performance, stability, and compatibility. Build and integrate SAST, DAST, IAST, SCA, code security scanning, and image security scanning into CI/CD workflows, and drive deep integration of tools such as SonarQube and Coverity to form a closed loop of scanning, gating, remediation, and re-validation. Drive core application security protection and offensive/defensive capabilities across scenarios such as XSS, SQL injection, SSRF, deserialization, command execution, authentication/authorization flaws, privilege escalation, and API security . Advance AI-Native Security Engineering by applying LLMs and AI Agents to vulnerability analysis, rule generation, false-positive reduction, remediation suggestions, security knowledge management, and workflow automation, while building deep understanding of their architecture, principles, and security implications. Partner closely with business engineering teams to drive security standards, integration rules, quality gates, risk classification, remediation workflows, and overall security governance adoption. Collaborate with engineering, architecture, operations, QA, and business stakeholders to solve complex security problems and turn them into scalable product capabilities, engineering solutions, and governance mechanisms. What We Look For In You Strong fundamentals in computer science and security, with deep understanding of operating systems, networking, compilers/ JVM internals, distributed systems, application security, cloud-native security, and software supply chain security , with both breadth and depth in security technologies. Expert-level Java proficiency , especially in JVM internals, ClassLoader , Java Agent, ASM, ByteBuddy, bytecode instrumentation, profiling, and performance tuning ; proficient in Python or Golang as well. Proven hands-on experience with RASP, SAST, DAST, IAST, SCA, image security, and code security scanning , with the ability to independently design, integrate, and productionize security capabilities. Strong offensive and defensive security experience , with deep understanding of vulnerability root causes, exploitation techniques, detection logic, bypass methods, and remediation strategies in web, API, and microservice environments. Strong practical experience with LLMs and AI Agents , plus deep understanding of model architecture, agent design, tool invocation, context engineering, evaluation methods, and the impact of AI on both security engineering and attacker capabilities. Strong engineering and product mindset, capable of leading the design and implementation of security products, platform modules, and SDKs/Agents while balancing security effectiveness, performance overhead, integration cost, and operability . Strong ownership, communication skills, and cross-functional influence, with a proven ability to drive business teams on security governance, policy adoption, and remediation outcomes. Preferred Qualifications Background from top-tier Internet companies, cloud providers, or leading cybersecurity vendors ; Experience leading DevSecOps platforms, application security platforms, RASP systems, code scanning platforms, or cloud-native security platforms ; Strong experience in security product development, SDK /Agent development, vulnerability research, penetration testing, red/blue team exercises, or incident response ; Hands-on experience in AI + Security initiatives such as security copilots, intelligent rule generation, automated vulnerability analysis, or remediation recommendation systems. Perks & Benefits Competitive total compensation package L&D programs and education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Paris ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. THE ROLE This role exists to ensure the physical safety, regulatory compliance, and operational resilience of Mistral's HQ. As a member of the global security team, you will shape and execute the HQ's physical security strategy for one of the world’s leading AI companies, directly impacting the protection of employees, assets, and intellectual property. Your work will establish Mistral's HQ as a benchmark for physical security in the tech sector, enabling business growth while mitigating risks in a cutting-edge, AI-driven environment. You will own the end-to-end physical security framework—from access control and surveillance to crisis response—collaborating closely with French authorities (Police, Gendarmerie, ANSSI) and internal stakeholders. This is a unique opportunity to build a scalable, compliant, and innovative security model that sets the standard for Mistral's expansion across Europe. WHAT YOU WILL DO - Define and implement a unified physical security strategy for Mistral AI’s France facilities, aligning global policies with local regulations. - Lead the consolidation and management of security vendors under SLAs, ensuring performance, cost-efficiency, and compliance. - Establish a regulatory compliance program to achieve 100% adherence to French/EU laws (CNIL, RGPD, NIS2) and industry standards (ISO 27001/28000). - Deploy state-of-the-art security technologies, including AI-powered surveillance, access control, and intrusion detection systems. - Develop and test crisis response frameworks, including emergency protocols for evacuations, lockdowns, and high-impact incidents. - Formalize liaison protocols with French authorities to enable threat intelligence sharing and collaborative security measures. - Optimize the France security budget (€1M–3M/year) through vendor consolidation, efficiency gains, and risk-based prioritization. - Measure and report on security performance, ensuring zero major incidents and continuous improvement of safety standards. WHAT WE ARE LOOKING FOR - Proven experience designing and implementing physical security programs for large, high-stakes facilities or multi-site operations. - Vendor management expertise with a track record of consolidating, negotiating, and optimizing security service contracts (e.g., guard services, CCTV, access control). - Crisis leadership with hands-on experience developing and testing emergency response protocols for incidents like protests, cyber-physical threats, or natural disasters. - Deep knowledge of French/EU compliance frameworks (CNIL, RGPD, NIS2, ISO 27001/28000) and a history of leading audits or certifications. - Builder mentality—thrives in ambiguous environments, turning strategy into scalable, operational security solutions. - Data-driven decision-making—uses KPIs, risk assessments, and metrics to continuously improve security posture. - Resilience under pressure—maintains clarity and effectiveness in high-stakes, fast-evolving situations. - Uncompromising integrity—upholds the highest ethical standards, ensuring confidentiality and trust in sensitive contexts. WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Location: Paris ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. Role summary   As a Platform Security Engineer on the Security team, you will architect and maintain the security posture of our rapidly scaling AI infrastructure and application lifecycle. Security is not a gate but an enabler, and you will embed robust controls into our continuous integration and deployment pipelines, infrastructure environments, and developer workflows to protect our systems without sacrificing velocity. Your role exists to ensure that our research and engineering teams can move fast while staying secure. You will shape how security integrates with every layer of our stack, from code to cloud, making secure practices invisible to developers and automatic by default.     What you will do   - Drive threat modeling and risk prioritization exercises as the security counterpart in system-design reviews for core infrastructure and new products. - Own end-to-end vulnerability management across continuous integration and deployment pipelines and runtime environments, covering infrastructure and applications. - Secure our container orchestration deployments and containerized workloads, implementing advanced hardening to prevent lateral movement across distributed systems. - Define and enforce Infrastructure-as-Code security by building robust guardrails and integrating policy-as-code directly into deployment pipelines. - Design and execute a comprehensive security tooling strategy, managing solutions for cloud-native application protection, cloud security posture, static code analysis, dependency scanning, secrets management, and vulnerability tracking. - Champion developer enablement by building secure defaults, streamlining remediation workflows, and drafting actionable security guidelines. - Build foundational security automation to scale alongside hyper-growth, minimizing manual overhead while establishing a pragmatic security culture.   What we're looking for:   - Five or more years of experience in Platform Security, Security Engineering, or Cloud Security, ideally as an early security hire in a fast-scaling environment. - Deep understanding of container orchestration and container security, alongside strong experience securing Infrastructure-as-Code across major cloud providers. - Strong programming and scripting skills in languages such as Python or Go to build security automation and integrate diverse security tools into developer workflows. - Extensive experience deploying and tuning modern security tooling with a pragmatic approach to vulnerability management and threat modeling. - Strong communication skills with a proven track record of partnering with developers and researchers to embed secure defaults without creating engineering friction. WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Location: Metn, Lebanon The Company Toters is an on-demand e-commerce and delivery platform that enables customers to get anything in their city with the highest level of convenience. At Toters, technology is at the heart of everything we do. Our product teams build features that simplify customers’ lives, while our engineers create scalable solutions to deliver faster and more cost-effectively. If you thrive in a high-growth startup environment and want to help reshape how people shop across the Middle East, join us. Role Overview As a Senior Offensive Security Engineer (L5), you will own complex offensive security initiatives that span multiple teams. You will lead advanced penetration testing, red team exercises, and adversarial simulations to uncover systemic weaknesses in our web applications, APIs, mobile apps, cloud infrastructure, identity, payment-adjacent flows, and overall attack surface. You will act as a hands-on technical leader : influencing secure design decisions with evidence, mentoring mid-level and junior offensive engineers, and driving improvements that meaningfully reduce risk. Description In this senior role, you will take end-to-end ownership of offensive security efforts with a focus on high-impact outcomes. Your responsibilities include: Lead comprehensive penetration tests and red team / assumed-breach exercises targeting web applications, APIs, mobile applications, cloud infrastructure, and authentication systems (including identity and privileged-access paths). Lead mobile offensive testing on Android and iOS, including evaluation and bypass/validation of runtime protection, tamper resistance, certificate pinning / Certificate Transparency, and key/secret shielding using DexProtector or similar RASP / app-shielding tools, plus complementary tooling such as MobSF. Perform in-depth threat modeling and identify complex attack paths across services and trust boundaries (including authorization flaws, tenant isolation, token/session issues, edge/WAF bypass, and client-secret exposure). Deliver high-quality security assessment reports with clear risk ratings, business impact analysis, practical remediation guidance, and evidence quality that engineering and audit stakeholders can use in a SOC 2 and PCI DSS context—then re-test and validate fixes before closure. Collaborate with Engineering, DevOps, Product, and the Security Engineer track to influence secure architecture decisions and ensure vulnerabilities are addressed at the root cause. Develop and improve offensive security methodologies, tools, and automation to increase efficiency and coverage. AI-assisted testing is a must. Mentor mid-level and junior offensive security engineers, conduct offensive-focused code/design reviews, and help raise the overall security capability of the team. Participate in purple team exercises with the detection and incident response teams to improve defenses based on real attack simulations. Stay at the forefront of offensive security research, emerging threats, and TTPs, and assess their relevance to Toters. Contribute offensive input to security standards, policies, and secure development practices across the engineering organization (you advise; you do not own policy issuance or GRC evidence packs). Support structured disclosure (VDP / researcher reports) through reproduce, rate, de-duplicate, and validate. Key Qualifications Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience. 6+ years of hands-on experience in offensive security, penetration testing, or red teaming. Strong expertise in web application, API, and mobile security testing (Android and iOS). Working knowledge of DexProtector or similar mobile shielding / RASP tooling: what it protects, how testers evaluate residual risk, and how to validate that hardening holds. Advanced proficiency with offensive security tools (Burp Suite, Metasploit, Cobalt Strike or equivalent adversary-emulation platforms, custom tooling, etc.). Proficient in writing robust, reusable scripts and small tools for automation (Python preferred, Bash for quick tasks). Solid experience with cloud security testing (AWS preferred) and infrastructure attack techniques. Proven ability to lead complex security assessments from scoping to reporting and remediation validation. Strong risk assessment and threat modeling skills, with the ability to communicate technical risks clearly to both technical and non-technical stakeholders. Familiarity with SOC 2 and PCI DSS as they apply to offensive work (scoped pentests, application/API/payment-adjacent testing, evidence-quality reporting). This role does not own control design or audit evidence collection. Experience mentoring engineers and influencing cross-team security practices. Excellent written and verbal communication skills in English. Nice to Have Industry-recognized certifications such as OSCP, OSCE, OSEP, CRTO, or PNPT. Experience running full-scope red team or assumed-breach exercises. Experience developing custom exploits, tooling, or automation for offensive security. Knowledge of MITRE ATT&CK and adversary emulation. AI and AI pentesting: testing LLM/agent applications (prompt injection, tool/plugin abuse, data-exfil via agents) and using AI-assisted pentest workflows with mandatory human review. Previous experience in high-scale e-commerce, delivery, or fintech environments, including payment API / tokenization / third-party PSP testing as a tester (not as PCI control owner). Fluency in Arabic and English (French is a plus). What We Offer Competitive compensation package. Discounts on Toters orders. First-class medical insurance. Ready to own offensive security at scale and help build a safer platform for millions across the Middle East? Apply now!

Location: US / Remote Workplace: remote About the Company Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem. Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.   About This Role This role is for a Web3 security researcher who can act as a public face for CertiK. This means having a strong social media presence, speaking at conferences, and being openly helpful to the wider security community. This doesn't mean you have to have tens of thousands of followers on X, but you do need to be comfortable interacting with the general public. The specific type of security researcher is flexible - contract/chain auditors, pen testers, engineers, and multi-talented individuals can apply. This is a great role for a generalist. Responsibilities Work closely with the Web3 Task Force Team to create stronger connections to the blockchain ecosystem. Speak at conferences about your area of expertise on behalf of CertiK. Complete interviews about various Web3 security topics. Perform tasks cross-functionally among the various teams at CertiK. Support the marketing and feedback collection of CertiK’s products and services. Requirements 3+ years of experience in the Web3 space. Strong social media presence and high visibility. Experience speaking at conferences or in front of large audiences. Strong technical skills in the areas of web3 security or related fields. Bonus Points Large number of social media followers. Previous experience being the public face of an organization.

Location: Spain; United Kingdom; Serbia; Germany Who we are Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes—it just works and is always free for the first 200 endpoints with no functional limits. By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and security risks, and protects the digital employee experience. In 2025, Action1 was recognized by Inc. 5000 as the fastest-growing private software company in America . The company is founder-led by Alex Vovk and Mike Walters , entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company. The Role We are looking for a Product Security Engineer to join the team responsible for securing Action1’s multi-tenant SaaS product. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable. This is a hands-on role for someone who understands both software engineering and cybersecurity, enjoys working directly with developers, and wants to help build security into the product without slowing teams down unnecessarily. What you’ll do Support PSIRT and vulnerability handling activities Validate, triage, track, and coordinate security reports Provide practical remediation guidance to engineering teams Help validate security fixes and reduce product security risks Review code, APIs, and architecture to identify security issues early Conduct threat modeling and security design reviews Improve security automation in engineering workflows Support SAST, SCA, secrets scanning, and other security controls Maintain SBOMs, dependency visibility, and remediation follow-up Support security assessments, vulnerability assessments, and penetration testing Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks What we’re looking for 3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field Strong software engineering background and ability to work effectively with engineering teams Understanding of application, API, infrastructure, and software supply chain security risks Experience applying cloud security concepts and practices Understanding of IAM, network security, logging, monitoring, and secure cloud architecture patterns Familiarity with vulnerability management, incident response, security assessments, and secure SDLC practices Experience with threat modeling and security design reviews Strong communication skills, including professional communication with external researchers and vendors Ability to work independently and as part of a team in a fast-moving environment Nice to have Genuine interest in cybersecurity and motivation to grow as a product security expert Hands-on experience with AWS security controls, best practices, and architecture patterns Hands-on experience with C++ or JavaScript Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools Experience with threat modeling for SaaS, API, cloud, or on-prem product components Experience with SBOM generation, dependency visibility, or software supply chain security What we offer Fully remote work environment Opportunity to work on a real security product used by IT and security teams High ownership and direct impact on product security practices Close collaboration with engineering, product, and security teams Fast-growing software company with low bureaucracy and practical decision-making Opportunity to improve security processes, automation, and engineering workflows Supportive team that values clear thinking, ownership, and continuous learning

Location: London, England Fin , now part of Salesforce, is on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey, from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk, giving modern support teams one single system. Together with Salesforce, the #1 AI CRM, where humans with agents drive customer success, we're building the future of customer experience. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword, it's a way of life. The world of work as we know it is changing, and we're looking for Trailblazers who are passionate about bettering business and the world through AI. Ready to level up your career at the company leading workforce transformation in the agentic era? You're in the right place. Agentforce is the future of AI, and you are the future of Salesforce. What's the opportunity? Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission. The Cloud Security team is responsible for protecting the platforms that power Fin. We partner closely with infrastructure and product engineering teams to secure cloud environments, detect emerging threats, respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms and production systems that underpin every Fin customer interaction. The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how our cloud platforms, production systems, and engineering workflows are designed, deployed, and operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape. What will I be doing? Design and implement secure cloud architectures across our AWS environments. Build and maintain protective and detective controls that improve visibility into threats across our cloud environments. Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response. Lead cloud security investigations and incident response activities in partnership with engineering teams. Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security incidents. Build automation that improves the scalability, reliability, and effectiveness of security controls. Partner with infrastructure teams to embed security into cloud platforms, infrastructure-as-code workflows, and engineering practices. Develop and improve cloud security standards, guidance, and best practices across Fin. Drive security initiatives from problem definition through design, implementation, and measurable outcomes. Assess emerging threats to cloud environments and help evolve our defensive capabilities. Help shape Fin's AI-first approach to security, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities. Support the secure adoption of AI-assisted software development tools and engineering workflows. What skills do I need? Proven experience in cloud security, security engineering, detection engineering, or a closely related field. Strong experience securing and operating production AWS environments. Deep understanding of cloud security principles, modern attack techniques, and security best practices. Experience building or operating detection, monitoring, or threat detection capabilities. Hands-on experience investigating security incidents, leading technical investigations, and driving remediation efforts. Experience implementing security controls across cloud platforms and production environments. Strong programming skills and experience building automation, tooling, or operational workflows. Experience working with infrastructure-as-code practices and modern cloud-native technologies. Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness. Ability to communicate security concepts clearly and collaborate effectively with engineering teams. A pragmatic approach to balancing security, customer impact, and engineering velocity. Bonus skills & attributes Experience building detection engineering, threat hunting, or security operations capabilities at scale. Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring. Experience applying AI to detection, response, threat analysis, or security operations workflows. Familiarity with AWS networking, identity, and cloud security patterns. Experience working across both large-scale SaaS environments and high-growth companies. #LI-Hybrid Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. At Fin, we want to give people what they need to do the best work of their careers. Our benefits and programs are designed to support your health and wellbeing, your family, your time away from work, and your financial future. Offerings vary by location in line with local practices and requirements. Learn more about working at Fin and the benefits we offer at fin.ai/careers . Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records. Policies Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week. We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our core values . Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Location: Dublin, Ireland Fin , now part of Salesforce, is on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey, from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk, giving modern support teams one single system. Together with Salesforce, the #1 AI CRM, where humans with agents drive customer success, we're building the future of customer experience. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword, it's a way of life. The world of work as we know it is changing, and we're looking for Trailblazers who are passionate about bettering business and the world through AI. Ready to level up your career at the company leading workforce transformation in the agentic era? You're in the right place. Agentforce is the future of AI, and you are the future of Salesforce. What's the opportunity? Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission. The Cloud Security team is responsible for protecting the platforms that power Fin. We partner closely with infrastructure and product engineering teams to secure cloud environments, detect emerging threats, respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms and production systems that underpin every Fin customer interaction. The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how our cloud platforms, production systems, and engineering workflows are designed, deployed, and operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape. What will I be doing? Design and implement secure cloud architectures across our AWS environments. Build and maintain protective and detective controls that improve visibility into threats across our cloud environments. Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response. Lead cloud security investigations and incident response activities in partnership with engineering teams. Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security incidents. Build automation that improves the scalability, reliability, and effectiveness of security controls. Partner with infrastructure teams to embed security into cloud platforms, infrastructure-as-code workflows, and engineering practices. Develop and improve cloud security standards, guidance, and best practices across Fin. Drive security initiatives from problem definition through design, implementation, and measurable outcomes. Assess emerging threats to cloud environments and help evolve our defensive capabilities. Help shape Fin's AI-first approach to security, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities. Support the secure adoption of AI-assisted software development tools and engineering workflows. What skills do I need? Proven experience in cloud security, security engineering, detection engineering, or a closely related field. Strong experience securing and operating production AWS environments. Deep understanding of cloud security principles, modern attack techniques, and security best practices. Experience building or operating detection, monitoring, or threat detection capabilities. Hands-on experience investigating security incidents, leading technical investigations, and driving remediation efforts. Experience implementing security controls across cloud platforms and production environments. Strong programming skills and experience building automation, tooling, or operational workflows. Experience working with infrastructure-as-code practices and modern cloud-native technologies. Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness. Ability to communicate security concepts clearly and collaborate effectively with engineering teams. A pragmatic approach to balancing security, customer impact, and engineering velocity. Bonus skills & attributes Experience building detection engineering, threat hunting, or security operations capabilities at scale. Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring. Experience applying AI to detection, response, threat analysis, or security operations workflows. Familiarity with AWS networking, identity, and cloud security patterns. Experience working across both large-scale SaaS environments and high-growth companies. #LI-Hybrid Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. At Fin, we want to give people what they need to do the best work of their careers. Our benefits and programs are designed to support your health and wellbeing, your family, your time away from work, and your financial future. Offerings vary by location in line with local practices and requirements. Learn more about working at Fin and the benefits we offer at fin.ai/careers . Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records. Policies Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week. We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our core values . Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Location: Hybrid - San Francisco, New York City About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Product Security Engineer to build the systems that triage and validate bug bounty and other externally reported security findings, not to work the queue. This role suits a software engineer moving into security or a security engineer with a strong engineering background. You will build large language model (LLM) and agent-based tooling that validates findings, traces them to their root cause, and opens fixes for well-understood vulnerability classes. This is a hybrid role based in San Francisco or New York City, with three days a week in the office. What you’ll do Build the systems that take in externally reported vulnerabilities and assess validity, severity, and reproducibility at a volume manual triage cannot match Build LLM and agent-based analysis that validates business logic, authentication, and design-level findings, not just known signatures Build systems that trace validated findings to their root cause and propose, and increasingly open, fixes for well-understood vulnerability classes, with human review gates Own the bug bounty program, including scope, policy, and researcher engagement, and feed every resolved report back into automated triage Extend the tooling into security testing capabilities that customers can use on what they build and deploy What you need 5+ years of software engineering or security engineering experience, building and shipping production systems or internal tools Wrote production code in JavaScript/TypeScript on Node.js, with hands-on experience in web frameworks such as Next.js or React Built with LLM or agent-based tooling Reproduced and assessed externally reported vulnerabilities, including judging severity Bonus if you Built security automation used across an engineering org, not just for your own team Built systems that auto-generate or propose code fixes, not just findings Tested or secured multi-tenant platforms where customer-built applications run on shared infrastructure Compensation & Benefits: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Location: Remote - United States About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We're looking for a Security Engineer to join our Cloud Security Engineering team. In this role, you'll help strengthen the security of our platform by building and improving the controls that protect our infrastructure. You'll play a key role in making security a core part of how we build, deploy, and scale our systems, while helping the company grow securely and confidently. You'll report to the Security Operations Manager, and this is a hybrid or fully remote within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday. What you'll do Design and implement scalable security controls across our cloud-native platform. Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation. Build secure by default infrastructure and code CI/CD pipelines. Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows. Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience. Conduct threat modeling, risk analysis, and mitigation planning for critical systems. Drive improvements in monitoring, detection, and incident response at the platform level. Build, deploy and maintain relevant tooling. What you need 8+ years of experience in infrastructure or platform security roles. Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening. Proficient with tools like Terraform, CDK, Kubernetes, and CI/CD security. Skilled at balancing engineering realities with principled security practices. Proven track record of shipping secure, resilient systems at scale. Bonus if you Have built or scaled security automation pipelines. Contributed to open-source security projects or tools. Hold certifications such as GCP Security Engineer, AWS certifications, CISSP, or OSCP. Hold a bachelor's or master's degree in Cybersecurity or similar disciplines. Benefits & Compensation: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. This salary range is an estimate. Actual salary will be based on job related skills, experience and location. Pay ranges outside San Francisco may be adjusted based on employee location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Location: United States About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role We are looking for a hands-on Physical Security Systems Technician to support deployment, validation, and maintenance of physical security infrastructure across our sites throughout the United States. This role is based in New York,  and requires frequent travel to support installations, upgrades, testing, and operational activities at multiple locations nationwide. The ideal candidate combines strong physical security systems knowledge with practical IT infrastructure experience, including networking, Windows/Linux systems, storage platforms, and log analysis. They will ensure systems are properly deployed, validated, documented, and production-ready. Key Responsibilities Installation & Support Install, configure, and maintain CCTV systems (cameras, NVRs/DVRs, VMS) Support access control systems (badging, controllers, readers, permissions) Perform hardware replacements (cameras, readers, controllers, cabling components) Troubleshoot physical security system issues across network, hardware, operating system, and application layers Support Windows and Linux-based systems supporting physical security platforms Assist with storage systems used for video retention and evidence management Testing & Validation Execute system testing after installations and changes Develop and run Site Acceptance Testing (SAT) procedures for new deployments Validate system performance, coverage, failover scenarios, storage retention, and compliance with design requirements Identify, track, and help resolve issues found during testing Verify network connectivity, device health, and system integrations Documentation Produce and maintain accurate technical documentation (network diagrams, device inventories, configurations, system architecture) Create and maintain SAT reports, test cases, and validation checklists Document system changes, incidents, troubleshooting activities, and resolutions Ensure documentation is structured, standardized, and audit-ready Deployment & Operations Support system upgrades, migrations, and new site rollouts Work with vendors and integrators to ensure quality delivery Provide on-site and remote support across multiple locations throughout the United States Monitor and troubleshoot system logs to identify operational issues and root causes Ensure systems comply with internal standards and security requirements Required Qualifications 2+ years of hands-on experience with physical security systems (CCTV, access control) Experience installing and configuring cameras and access control hardware Experience with system testing, commissioning, SAT, or similar validation activities Ability to produce clear technical documentation and reports Solid IT infrastructure knowledge, including: Networking (TCP/IP, VLANs, routing basics, PoE, DNS, DHCP) Windows administration and troubleshooting Linux administration, services, logs, and basic troubleshooting Storage technologies and capacity management fundamentals Log analysis and troubleshooting using system and application logs Strong troubleshooting skills across hardware, software, operating systems, and networks Ability to work independently in remote locations with minimal supervision Valid driver’s license and ability to travel extensively throughout the United States Excellent communication and organizational skills Preferred Qualifications Experience with enterprise VMS platforms Familiarity with enterprise access control systems Experience in data center, critical infrastructure, or enterprise environments Knowledge of low-voltage cabling standards Exposure to structured testing methodologies (SAT, UAT, commissioning) Experience with monitoring, logging, and system health validation tools Familiarity with virtualization platforms and enterprise IT environments Key Traits Hands-on and execution-focused Detail-oriented and structured Strong sense of ownership for quality and completeness Clear and disciplined in documentation Strong analytical and troubleshooting mindset Comfortable working across multiple sites and environments Willing and able to travel extensively throughout the United States (up to 75%+ travel) Pay Transparency We offer competitive compensation and benefits packages. Actual compensation will be determined based on job-related factors, including experience, skills, qualifications, the level at which the candidate is hired, and geographic location, consistent with applicable law. Base Compensation Range $85,900 — $107,300 USD Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity This is not a traditional GRC hire. The Tech G overnance Office is looking for someone who combines the governance judgment of a seasoned compliance professional with the drive of a forward-deployed engineer — someone who closes gaps by shipping solutions, navigates ambiguity without hand-holding, and operates with the urgency of a startup and the rigour of a regulated financial institution. You will own complex cross-functional workstreams independently — coordinating across Engineering, Legal, Product, and Finance — while managing external auditors and regulators. Strong written and verbal communication in both English and Mandarin is a meaningful advantage in this role. AI tooling is not optional; it is how you work. Who You Are Self-directed driver — You run cross-functional workstreams without being managed. Ambiguity is a starting point, not a blocker. AI-native operator — You already use AI to do more, faster — and you raise the floor for the teams around you. Clear communicator — You earn trust across regulators, auditors, and C-suite through precision and consistency — in any room. Culture Fit Pace Standards Startup velocity — Decisions move fast. Priorities shift. You ship, iterate, and adapt — without waiting for perfect conditions or top-down direction. Financial institution rigour — Audit trails matter. Regulators scrutinise. The bar for accuracy, documentation, and accountability is institutional-grade — always. > The tension between these two is not a bug — it is the job. We are looking for someone who holds both without compromise. What You’ll Be Doing Independently lead audit remediation programmes — assess gaps, develop structured plans, and drive verified closure across engineering, product, legal, and operations without escalation dependency. Own cross-functional governance workstreams — set milestones, coordinate accountability, and remove blockers across departments with limited management oversight. Conduct IT security and architecture governance reviews — assess whether systems and processes meet applicable standards, and issue findings with clear ownership and remediation timelines. Build and maintain the policy estate — draft, refine, and operationalise IT governance policies and procedures; translate regulatory requirements into implementation-ready guidance for first-line teams. Lead regulator and auditor engagement — serve as the primary coordination interface for external audit and regulatory correspondence, representing the Tech G overnance Office with credibility and precision. Deploy AI to accelerate compliance operations — prototype and scale AI-assisted workflows for evidence collection, control monitoring, audit response, and policy generation; drive team-wide adoption. Deliver Tech G overnance -level reporting — produce governance dashboards and executive briefs on remediation status, risk exposure, and regulatory posture, independently and to publication standard. Track the regulatory horizon — monitor evolving requirements across active jurisdictions, translate changes into prioritised internal action, and brief senior leadership proactively. What We Look For In You AI Adoption & Application — Must Have Active daily use of AI tools to accelerate compliance and governance work — demonstrated practice with measurable output impact, not theoretical awareness. Ability to identify, build, and scale AI-assisted workflows within a Tech G overnance office context — evidence automation, policy generation, audit response, or control monitoring. Working knowledge of AI governance and risk — sufficient to contribute to internal AI oversight frameworks and assess AI-related compliance obligations. Independent Cross-Functional Leadership — Must Have Demonstrated ability to own and drive complex, multi-stakeholder workstreams independently — setting direction, coordinating accountability, and delivering outcomes without management escalation. Track record of influencing without authority across engineering, legal, finance, and operations in a fast-moving environment. Comfortable operating under ambiguity and shifting priorities while maintaining institutional-grade standards for accuracy and documentation. Experience 8+ years in IT audit, risk management, compliance, or security governance 3+ years leading governance programmes at a large-scale internet, financial services, or crypto firm Exposure to IPO-readiness or high-scrutiny regulatory examination programmes preferred Frameworks & Standards ISO 27001, SOC 1/2, PCI-DSS, COBIT, NIST — deep working knowledge GDPR and APAC data protection regimes Crypto and blockchain-specific compliance risk awareness a strong asset Engineering Sensibility Able to read and interpret code, architecture diagrams, and technical design documents without engineer-translation dependency Familiarity with cloud environments (Alibaba Cloud, AWS, GCP) and associated security tooling Communication Executive-level written and verbal communication in English — board-ready governance briefs, regulator responses, and Tech G overnance -level reporting produced independently Proficiency in Mandarin (written and verbal) is a strong advantage for APAC regulatory and stakeholder engagement Preferred Qualifications Professional security or governance certification: CISA · CISSP · CRISC · CISM · CCISO · Agentic AI Experience building AI-powered compliance tooling — audit automation, continuous control monitoring, or policy-to-control mapping Prior involvement in SOX ITGC, SEC Reg S-K Item 106, or equivalent listing-authority tech governance programmes Crypto-native compliance exposure — Proof of Reserves, SAB 121, Travel Rule, AML/CFT programme governance Active regulatory footprint across MAS, VARA, FCA, HKMA/SFC, or equivalent Why This Role OKX operates across 50+ jurisdictions with live regulatory programmes. The Tech G overnance Office is building infrastructure-grade compliance capability — not checkbox compliance. This is a rare opportunity to shape how that work gets done: independently, at pace, and with AI at the centre of the method. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! OKX Statement: OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Задачи: — Проектирование архитектур безопасности для облачной инфраструктуры и приложений с применением принципов secure-by-design. — Сотрудничество с командами продукта и архитектуры для внедрения средств контроля безопасности и автоматизации моделирования угроз. — Аудит и проверка реализации мер безопасности в инфраструктурных манифестах и CI/CD пайплайнах. — Контроль безопасности продукта при миграции из дата-центров в публичные облака, такие как AWS. — Консультирование инженерных команд по лучшим практикам безопасности и требованиям нормативного соответствия. Требования: — Возможность релокации из России или Беларуси. — Опыт обеспечения безопасности микросервисов, разработанных на JavaScript и TypeScript. — Владение инструментами CI/CD (GitLab, Jenkins) и Infrastructure-as-Code (Terraform, Helm, CloudFormation). — Практические навыки разработки на Python или Shell. — Глубокое понимание безопасности цепочки поставок, целостности программного обеспечения и безопасной доставки ПО. — Опыт работы с Docker и mesh-технологиями, такими как ISTIO. Будет плюсом: — Опыт проектирования безопасных сервисов на Kubernetes и AWS. — Знание законов о конфиденциальности, таких как GDPR, и отраслевых стандартов PCI, ISO 27001, NIST. — Профессиональные сертификаты в области безопасности (CISSP, CISM, CCSK, CCSP, CEH). Условия: — Медицинская страховка с глобальным покрытием. — 23 рабочих дня отпуска в году плюс оплачиваемый больничный. — Пакет релокации, включающий билеты, проживание в отеле до 2 недель и визовую поддержку для сотрудника и семьи. — Возможности профессионального развития и изучения языков. — Ежегодный пересмотр вознаграждения и регулярные тимбилдинги.

Location: London DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk. Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets. We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it. DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus. We are seeking a Network Security Engineer to join the network security team to ensure that our infrastructure and networks are properly protected. They will design, coordinate and implement security controls, audit configurations, and design networks in a hybrid compute environment. A successful candidate will have an attention to detail, the ability to understand what impacts their changes have on the network and relevant associated services. What you’ll be doing: Collaborate with cross-functional security, technology, and trading teams to design and deploy innovative solutions that enhance both system integrity and trading performance. Actively contribute to the design, implementation, and maintenance of mission-critical trading infrastructure that drives resilient and scalable market operations. Implement robust strategies to reduce network risks by leveraging micro-segmentation, port-based security, and other innovative methods. Evaluate, diagnose, and implement effective network security solutions such as firewalls, network detect and response, intrusion prevention systems (IPS), and VPN concentrators to improve our network security and ensure reliable remote access. Leverage automation, AI, and other emerging and innovative technologies to continuously enhance our ability to detect and respond to security events. Perform in-depth analysis of network packet captures to investigate security incidents and identify areas for improvement. Continuously seek opportunities to automate tasks and streamline security operations for improved efficiency and effectiveness. What we’re looking for: You are passionate about network security You are a network security engineer who thrives on designing, implementing, and supporting cutting-edge security systems that keep our network safe from emerging threats. You are able to get your hands dirty with hands-on experience in firewalls, client VPNs, SASE, NDR, and IDS solutions. You enjoy scripting and coding to automate processes and reduce repetitive work You have a solid understanding of TCP, UDP, IP, the OSI Model, and Layer 1/2/3 principles. You are a dedicated professional who isn’t afraid of stepping up for on-call duties—even if it means working nights or weekends You are someone that continuously seeking innovative improvements to drive high-quality, state-of-the-art, and effective security solutions. You are an effective communicator, able to translate complex technical insights into clear, actionable strategies that resonate with cross-functional teams. For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at https://drw.com/privacy-notice . California residents, please review the California Privacy Notice for information about certain legal rights at https://drw.com/california-privacy-notice . #LI-MM1

Location: Dublin Workplace: onsite Larian Studios is looking for a motivated and hands-on Junior Security Engineer to help strengthen and support the security posture of our global studio environment. This role is ideal for someone early in their cybersecurity career who wants exposure to infrastructure security, vulnerability management, monitoring, and operational security within the gaming industry.   You will work closely with IT, infrastructure, and development teams to support security operations, investigate threats, improve security controls, and help maintain best practices across the organisation. Responsibilities Assist in identifying, assessing, and mitigating vulnerabilities across infrastructure and applications Support the deployment and operation of security tools across multiple systems and environments Perform security monitoring, vulnerability scanning, and assist with log analysis to detect incidents and threats Support technical security audits and help provide actionable recommendations Assist in maintaining secure baseline configurations for Windows and Linux systems Participate in incident handling and escalation procedures Help educate staff on information security best practices Research and learn new technologies, tools, and security techniques Maintain up-to-date security documentation and operational procedures Participate in change management workflows to support secure implementations Requirements 1–3 years of experience in IT, infrastructure, or cybersecurity-related roles Basic understanding of cybersecurity principles and industry best practices Familiarity with vulnerability scanning or security monitoring tools Basic understanding of Windows and Linux operating systems Basic exposure to scripting or automation tools such as PowerShell, Bash, or Python Strong troubleshooting and analytical skills Good written and verbal communication skills in English Passion for cybersecurity and willingness to learn Ability to work collaboratively within a team environment This is a full-time, on-site role, requiring your presence in the office to support collaboration and creativity Nice to Haves Exposure to SIEM, IDS/IPS, endpoint protection, or vulnerability management tools Interest in learning security automation and scripting Experience supporting multi-site or international environments Cloud platform exposure (AWS, Azure, or GCP) Interest in gaming or gaming industry environments Understanding of networking fundamentals What we offer An international team of over 500 employees spread across 7 studios around the world, each of which have their own unique qualities, and maintain a small-studio feel An open, collaborative environment where ideas are welcome and encouraged A managerial team consisting of highly experienced game developers at the top of their fields Sharing hobbies and passions with like-minded colleagues Inclusive environment with many activities organized by the studios or the employees Commitment to making the best game possible for the fans, including listening to community feedback

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We're seeking a Platform Hardware Security Engineer to design and implement security architectures for bare-metal infrastructure. You'll work with teams across Anthropic to build firmware, bootloaders, operating systems, and attestation systems to ensure the integrity of our infrastructure from the ground up. This role requires expertise in low-level systems security and the ability to architect solutions that balance security requirements with the performance demands of training AI models across our massive fleet. Key responsibilities Design and implement secure boot chains from firmware through OS initialization for diverse hardware platforms (CPUs, BMCs, switches, peripherals, and embedded microcontrollers) Architect attestation systems that provide cryptographic proof of system state from hardware root of trust through application layer Develop measured boot implementations and runtime integrity monitoring Create reference architectures and security requirements for bare-metal deployments Integrate security controls with infrastructure teams without impacting training performance Prototype and validate security mechanisms before production deployment Conduct firmware vulnerability assessments and penetration testing Build firmware analysis pipelines for continuous security monitoring Document security architectures and maintain threat models Collaborate with software and hardware vendors to ensure security capabilities meet our requirements Minimum qualifications Hands-on experience with secure boot, measured boot, and attestation technologies (TPM, Intel TXT, AMD SEV, ARM TrustZone) Strong understanding of cryptographic protocols and hardware security modules Experience with UEFI/BIOS or embedded firmware security, bootloader hardening, and chain of trust implementation Proficiency in low-level programming (C, Rust, Assembly) and systems programming Knowledge of firmware vulnerability assessment and threat modeling Track record of designing security architectures for complex, distributed systems Experience with supply chain security Ability to work effectively across hardware and software boundaries Knowledge of NIST firmware security guidelines and hardware security frameworks Preferred qualifications 8+ years of experience in systems security, with at least 5 years focused on firmware and hardware security (firmware, bootloaders, and OS-level security) Experience with confidential computing technologies and hardware-based TEEs Knowledge of SLSA framework and software supply chain security standards Experience securing large-scale HPC or cloud infrastructure Contributions to open-source security projects (coreboot, CHIPSEC, etc.) Background in formal verification or security proof techniques Experience with silicon root of trust implementations Experience working with building foundational technical designs, operational leadership, and vendor collaboration Previous work with AI/ML infrastructure security The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Remote Who We Are: Galaxy Digital Inc. (Nasdaq: GLXY) is a global leader in digital assets and data center infrastructure, growing the economy that runs on code. Galaxy delivers the onchain infrastructure that connects institutions to digital assets, including trading, advisory, asset management, staking, self-custody, and tokenization. Galaxy also develops and operates data center infrastructure to power AI and HPC workloads. Anchored by its Helios campus in Texas, Galaxy is building a multi-gigawatt pipeline of more than 5.7 GW of potential capacity, positioning it among the largest and fastest-growing data center developers in North America. The Company is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia. Additional information about Galaxy's businesses and products is available on www.galaxy.com . What We Value: We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be. Seek Excellence. Be Selective To Be Effective. Be Highly Aligned, Loosely Coupled. Disagree Transparently. Encourage Independent Decision-Making. Build Dream Teams. Who You Are: The Blockchain Security Lead owns the security posture of on-chain systems and protocols across the organization. This role blends strategic leadership with deep hands-on expertise, overseeing a small team of blockchain security engineers while actively contributing to design reviews, threat modeling, and code audits. You’ll partner closely with on-chain product and engineering teams to embed security into architecture, development, and operations—building scalable, reusable security controls that grow with the business. What You’ll Do: Lead, mentor, and grow a team of blockchain security engineers. Define and evolve the blockchain security strategy and roadmap. Serve as a trusted security partner to product, protocol, and infrastructure teams. Lead threat modeling and architecture reviews for on-chain systems. Perform and guide security reviews and audits of smart contracts (Solidity, Rust/Solana) and backend services and supporting infrastructure. Design and implement reusable security controls, patterns, and reference architectures. Support secure deployment of cloud-native infrastructure (containers, Kubernetes). Research emerging blockchain threats, exploits, and mitigations, and translate them into actionable controls. Embrace and champion the thoughtful adoption of AI to improve team performance and business outcomes. Leverage AI tools (e.g., generative AI, automation platforms, data copilots) to improve productivity, decision-making, and output quality in your day-to-day work. What We’re Looking For: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience) 10+ years of security software engineering experience 5+ years working with blockchain technologies 5+ years working with smart contract security across multiple chains Experience leading or mentoring a small, highly technical team Published material on vulnerabilities/security bugs within the Web3 community Expertise in secure SDLC, threat modeling, and application architecture review Multi agent code reviews for vulnerabilities using frontier models Secure coding practices and in-depth code review capability Strong familiarity with smart contracts (Solidity, Rust), cloud-native environments (Docker, Kubernetes), authentication and authorization, TLS/PKI, and cloud, infrastructure, and network security Clear, confident communicator across technical and non-technical audiences Comfortable balancing hands-on execution with strategic ownership; detail-oriented, pragmatic, and strong in problem solving under ambiguity Bonus Points: Direct exposure to Solana, staking systems, or similar Layer 1 protocols Prior experience at a blockchain security audit firm (e.g., Trail of Bits, Halborn, Ottersec, Zellic) Background in financial services or institutional crypto security Familiarity with DeFi protocol security, key management, and custody architectures Experience contributing to or leading security programs at a crypto exchange, protocol foundation, or digital asset firm What We Offer: Competitive base salary and discretionary bonus Hybrid/Flexible Working Arrangements Flexible Time Off (paid) 3% 401(k) company contribution Company-paid health and protective benefits for employees, partners, and other dependents Generous paid Parental Leave Competitive family planning benefits for US employees Opportunities to learn about the Crypto industry Smart, entrepreneurial, and fun colleagues Free daily snacks and weekly breakfasts/lunches Employee Resource Groups Free coaching and counseling sessions through Headspace Apply now and join us as we grow the economy that runs on code. Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, protected medical condition as defined by applicable state or local law, genetic information or predisposing genetic characteristic, or other characteristic protected by applicable federal, state, or local laws and ordinances. We will endeavor to make a reasonable accommodation to the known limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete the application process or to participate in an interview, please contact careers@galaxy.com.

Location: Hong Kong, Hong Kong SAR Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity We are looking for a Security Operations Engineer who combines hands-on engineering skills with security operations expertise. You will be deeply involved in the operations and troubleshooting of both server-side and client-side components within our Zero Trust architecture, drive security risk governance initiatives, and leverage AI tools to continuously improve system stability and compliance. Key Responsibilities K8s Operations & Vendor Engagement: Develop deep expertise in K3s / Kubernetes, including version management and disaster recovery. Independently identify and reproduce system issues, proactively engage with vendors to drive root cause analysis and resolution — not just workarounds. Zero Trust Network Access Governance: Work closely on Zero Trust initiatives, participate in cluster network configuration and troubleshooting, identify device compliance risks, drive remediation of non-compliant devices, and continuously optimize access control policies. Monitoring & Observability: Build and continuously improve log monitoring systems; proactively surface system risks through alert rules and trend analysis. AI Agent Implementation: Lead the adoption of AI Agents in security operations — design and deploy AI Agent workflows for log analysis, alert triage, and automated incident remediation (e.g., Multi-step Agents using Claude / GPT with tool-calling), reducing manual intervention and improving response efficiency. Requirements Must Have Solid understanding of Kubernetes / K3s core concepts; able to independently diagnose cluster-level issues. Foundational knowledge of security principles and Zero Trust model; strong networking fundamentals with the ability to independently troubleshoot and analyze network connectivity issues. Hands-on experience with AI tools (e.g., Claude, Codex, or equivalents) for day-to-day tasks including log analysis, scripting, fault diagnosis, and documentation. Bachelor's degree or above in Computer Science, Information Security, Network Engineering, or a related field; 3–5 years of relevant experience. Nice to Have Experience with DACS / NAC or similar device access control system operations or risk governance. Familiarity with monitoring and logging platforms such as Prometheus + Grafana, ELK, or Loki. Hands-on experience building AI Agents or implementing tool-calling workflows. Proven track record of collaborating with external vendors to drive issue resolution. Who You Are AI-Forward: You actively explore and integrate AI tools into your daily workflow to boost efficiency. Owner Mindset: You take genuine ownership of system health — you don't just close tickets. Strong Communicator & Driver: You can clearly articulate technical issues and effectively push cross-functional teams and vendors toward resolution. Self-Starter: You don't wait to be told — you proactively spot problems and drive them to closure. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .